Consider adding a mechanism to allow installation of `apk` in the analyzers

Problem to solve

Users might have projects with special environment needs regarding dependencies at the OS-level

Intended users

Developers

Further details

We have a specific use case where a repo contains both a maven and a YARN project, and this user is using maven to invoke the YARN compilation. The compilation fails because the SAST Java analyzer does not contain YARN.

Proposal

Please consider adding a mechanism to install dependencies in the analyzers.

What does success look like, and how can we measure that?

Users should be able to analyze projects with builds that involve OS-level dependencies.

Links / references

ZD https://gitlab.zendesk.com/agent/tickets/117781 (internal)

Assignee Loading
Time tracking Loading